Red Hat build of Keycloak

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenAug 24, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

Red Hat products listed as vulnerable in advisory AV26-1136

The November 9 notice covers many Red Hat products, mostly all versions, and tells admins to apply updates.

Canadian Centre for Cyber SecurityNov 9, 14:33 UTC · 2d agoAdvisory 2 sources

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Red Hat patched critical Keycloak flaw CVE-2026-18963 (CVSS 9.1) allowing unauthenticated attackers to take over any account, including administrative ones.

The Hacker NewsAug 24, 11:56 UTC · Aug 24, 2026VulnerabilityCVE-2026-18963 CVE-2026-155715 · 2 reads

Related CVEs

by mentions

CVE-2026-189637%9.1
Unauthenticated Account Takeover via Password Reset Flow in Red Hat Build of Keycloak
published Aug 18, 2026Red Hat Build of Keycloak (keycloak-services component, reset-credentials flow)PoC ×4
CVE-2026-15571<1%7.3
Predictable-hash account-linking forgery in Keycloak enables full account takeover
published Aug 18, 2026Red Hat Keycloak

Appears with

Red Hatvendor · 2
Canadian Centre for Cyber Securityorganization · 1
Escapevendor · 1
ansible-coreproduct · 1
Keycloakvendor · 1
OpenShiftproduct · 1
Univentionvendor · 1
Keycloakproduct · 1
Red Hat Enterprise Linuxproduct · 1

Entities are extracted by the model from each article. First seen Aug 24, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.